Free For All RootWars

[n3xg3n]

The idea is simple, anyone or any team with a computer can join an open network and try to root all other people's computers. It would require a central server to process teams, and perhaps that all competitors put up a small web server with an XML file...

Whatever

[TheCotMan]

Re: Free For All RootWars

The idea is simple, anyone or any team with a computer can join an open network and try to root all other people's computers. It would require a central server to process teams, and perhaps that all competitors put up a small web server with an XML file...

Whatever

Would you compare and contrast how this would be different from CTF, or aCTF?

[BonzoESC]

Re: Free For All RootWars

It seems like it'd be different because each team would have full control of their own setup. The problem is that in the duration of a weekend you're not going to get many teams breaking into a properly secured box.

[TheCotMan]

Re: Free For All RootWars

It seems like it'd be different because each team would have full control of their own setup. The problem is that in the duration of a weekend you're not going to get many teams breaking into a properly secured box.

Perhaps, but I'm trying to get the poster to elaborate on the idea and expand on what it would involve. If it is significantly close to an existing contest, perhaps this poster could work with the existing organizers of a contest, and if it is sufficiently different, perhaps other people will like the idea and support the poster with it.

For example, would this be a peer-vs-peer game, where users attempt to break into eachother's desktop machines? If so, would they be giiven "accounts" (shell or otherwise) and would services be required? Would any machine on the network be a sheep (as "players" or not)? Does gaining access to a non-player's machine that "accidentally" connected to this network count as a point? Based on point systems from others games, will DoS attacks be penalized?

If you ignore physical security, and player machines have no services or peer-player accounts and/or total network filtering, with no web browsing from the desktop, and only use of client software, it has the potential to be a boring game, with lots people people sitting passively, waiting for someone to do something stupid. In such cases, what exists? Trojan attacks, MiM attacks against connecting clients, ARP cache poisioning for L2 redir (lower layer MiM) and maybe expoilts against sniffers especially if they run as root?

CTF and aCTF have evolved as they have been played. CTF did have support in the early years for Server vs. Server (defenders), and variations were included to allow for a person to be only a defender, or "offender" (heh heh) or both. As CTF has grown and changed hands it has changed. aCTF has also changed too, to become more reliable and more robust, with many players and even more organization.

A problem exists when trying to introduce similar contests. CTF can take the whole con, and aCTF can also take most, if not the whole con. Any new similar game would likely create a competition over players.

So a thought comes to mind, will this game be sufficiently different, as to not create competition over players from aCTF or CTF? Could your idea be included in an existing contest? Would the people from aCTF be interested in including your idea in their contest next year?

Expand on your idea.

[haxer]

Re: Free For All RootWars

Any destroying?

[erehwon]

Re: Free For All RootWars

Any destroying?

While we're at it, what about social engineering, sexual harassment, or the liberal usage of rubber hose cryptanalysis?

[Vyrus]

Re: Free For All RootWars

well if any body cares... we have an idea thread in out form :D
http://forum.defcon.org/showthread.php?t=8156